journalbeat.inputs:
- paths:
  - "/var/log/journal"
  - "/var/log/journal/remote"
  seek: cursor

setup.template.settings:
  index.number_of_shards: 1

output.elasticsearch:
  hosts: ["https://oglog-os.${SUBDOMAIN}:9200"]
  username: "admin"
  password: "${OPENSEARCH_INITIAL_ADMIN_PASSWORD}"
  pipeline: "master_pipeline"
  protocol: "https"
  ssl.enabled: true
  ssl.verification_mode: full
  ssl.certificate: "/etc/journalbeat/oglog-jb.${SUBDOMAIN}.crt.pem"
  ssl.key: "/etc/journalbeat/oglog-jb.${SUBDOMAIN}.key.pem"

processors:
  - add_docker_metadata: ~

seccomp.enabled: false